Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0333ff-017a-3e0c-8975-9b7b580911f6.roa
File: 3a0333ff-017a-3e0c-8975-9b7b580911f6.roa (raw, json)
Hash identifier: 9M24TUU25X8zfzfUxGMdx0JB+o8ixPu2TcjdoKFs+uI=
Subject key identifier: 9C:FB:40:77:C6:A5:82:7E:69:ED:1D:3B:89:BE:85:C9:DD:0F:95:F3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C582228048E9B4C32E43EC00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0333ff-017a-3e0c-8975-9b7b580911f6.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.250.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:22:80:48:e9:b4:c3:2e:43:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=7ff732e2-6576-4394-923c-f1e383278fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:ff:2c:20:4c:d9:70:05:74:a9:5a:7d:c1:
c0:38:7d:ee:f2:15:b1:16:a8:a4:35:d9:be:7c:bb:
fb:0f:d1:fb:68:71:1c:1c:0d:92:b8:1d:14:8d:de:
c5:77:c3:2e:02:fc:f5:49:51:43:79:11:26:d4:bc:
00:9f:b4:05:92:01:f7:b1:f4:6f:78:89:c7:05:ce:
c0:46:43:77:f3:15:55:9d:6d:42:43:9b:61:71:de:
bb:80:69:06:87:b2:98:db:3c:2c:51:c5:b5:08:82:
37:90:cb:85:fc:76:5a:14:fc:a2:3f:14:bb:7e:97:
9f:e8:e8:0f:99:a4:3a:88:8c:81:56:bd:34:33:a5:
43:5d:f9:5c:98:ce:18:29:36:e3:f0:a0:1c:6b:fe:
a6:04:81:ac:59:45:48:fc:5f:fd:40:08:91:e0:90:
11:fa:42:ec:4e:bd:30:8d:d4:70:b1:cf:01:70:bf:
6d:34:77:3c:24:5b:4f:07:86:c2:0a:3c:7b:7f:cb:
12:5f:25:4d:86:7a:5c:9f:ab:61:de:ab:46:8f:f8:
0b:61:32:8a:ee:04:68:99:ea:f3:8d:cf:aa:d3:80:
70:45:bd:f9:72:e7:95:76:89:c2:bf:ff:f2:23:32:
14:fc:01:14:f6:96:9c:15:fa:87:97:67:ae:18:c8:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:40:77:C6:A5:82:7E:69:ED:1D:3B:89:BE:85:C9:DD:0F:95:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0333ff-017a-3e0c-8975-9b7b580911f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:e5:e6:4e:9c:a8:6c:a2:5b:90:b6:73:56:f4:01:ee:d4:28:
4c:83:fe:47:57:c4:71:37:dd:14:c3:5e:f1:6c:8b:10:eb:1b:
a7:b3:37:05:72:31:9b:dd:da:10:a4:58:c4:b2:23:29:7a:c5:
b4:d9:f6:a7:a5:1a:9f:b4:54:02:d4:18:b8:4a:52:51:45:f9:
71:cf:5a:1d:5f:96:6a:6a:b3:d6:17:9f:71:11:34:7e:b8:17:
2f:16:1a:5d:85:45:e8:1e:54:cf:fd:67:ba:dc:a8:2c:2c:86:
26:f5:e5:63:00:4f:e2:34:a6:31:9c:c4:89:f6:f6:bf:32:9c:
c4:23:81:81:a2:5d:4e:af:2a:62:d4:e8:33:43:99:2f:f7:d5:
af:7a:24:b0:b4:df:b4:90:b0:68:11:8f:6a:60:e2:89:18:29:
fc:7b:24:93:7a:9b:93:00:89:a4:29:5d:e9:a8:79:6f:15:c8:
d0:97:63:bb:5f:a4:31:8e:61:8c:af:24:e4:01:7a:7c:fe:6e:
01:01:ae:aa:cc:17:cc:56:76:fb:fb:7b:68:97:a2:6b:2b:56:
36:04:ca:ea:3b:bd:a9:3b:19:4c:f1:5a:72:6d:89:8e:0d:06:
4f:64:31:10:bb:76:08:12:74:62:23:f1:d6:29:fe:32:d6:e5:
e9:1a:c6:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiKASOm0wy5D7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
N2ZmNzMyZTItNjU3Ni00Mzk0LTkyM2MtZjFlMzgzMjc4ZmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVX/LCBM2XAFdKlafcHAOH3u8hWxFqikNdm+
fLv7D9H7aHEcHA2SuB0Ujd7Fd8MuAvz1SVFDeREm1LwAn7QFkgH3sfRveInHBc7A
RkN38xVVnW1CQ5thcd67gGkGh7KY2zwsUcW1CII3kMuF/HZaFPyiPxS7fpef6OgP
maQ6iIyBVr00M6VDXflcmM4YKTbj8KAca/6mBIGsWUVI/F/9QAiR4JAR+kLsTr0w
jdRwsc8BcL9tNHc8JFtPB4bCCjx7f8sSXyVNhnpcn6th3qtGj/gLYTKK7gRomerz
jc+q04BwRb35cueVdonCv//yIzIU/AEU9pacFfqHl2euGMjRZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJz7QHfGpYJ+ae0dO4m+hcndD5XzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2EwMzMzZmYtMDE3YS0z
ZTBjLTg5NzUtOWI3YjU4MDkxMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvprMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjl5k6cqGyiW5C2c1b0Ae7UKEyD/kdXxHE33RTDXvFsixDrG6ezNwVy
MZvd2hCkWMSyIyl6xbTZ9qelGp+0VALUGLhKUlFF+XHPWh1flmpqs9YXn3ERNH64
Fy8WGl2FRegeVM/9Z7rcqCwshib15WMAT+I0pjGcxIn29r8ynMQjgYGiXU6vKmLU
6DNDmS/31a96JLC037SQsGgRj2pg4okYKfx7JJN6m5MAiaQpXemoeW8VyNCXY7tf
pDGOYYyvJOQBenz+bgEBrqrMF8xWdvv7e2iXomsrVjYEyuo7vak7GUzxWnJtiY4N
Bk9kMRC7dggSdGIj8dYp/jLW5ekaxn8=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:03 2025 by rpki-client on console.sobornost.net